Overview

overview

10

Static

static

10

taskhostw.exe

windows7-x64

10

taskhostw.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    taskhostw.exe

  • Size

    68KB

  • MD5

    c7bdbdcc50566b54e9e41cc6c7f4c1aa

  • SHA1

    8d91458b892d2c452076420712f07a2855a85112

  • SHA256

    afc1cea595f43a1bc57d59c3185d9e29365bf13e1d19879f131167a3b6787430

  • SHA512

    96d50e1034c8aa77083329f1d319ff9ba46e1f72fb429772b6d4b447039e3b4da864b68a9111754cdf2dd8e32d224e749c32738c5322ad4664a209d794237e28

  • SSDEEP

    1536:BUFFrreEXiraXXrM3imnQbGgRtZ9JImTZOUqA:BYFrreLraynQbGmtDlOUqA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

big-stayed.at.ply.gg:31231

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • taskhostw.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections